2d2de4ec2f4138384d7c8e418fcc9d92f73fee6f80b06152b304ade7473b0db8

Analysis

max time kernel
8s
max time network
29s
platform
windows7_x64
resource
win7-20231215-en
resource tags

arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system
submitted
31/12/2023, 02:56

Target

25636e3b6aa7ba435d1f89bc33a47ca6.dll
Size

277KB
MD5

25636e3b6aa7ba435d1f89bc33a47ca6
SHA1

c9d5b0927685cd82588eb239f84f5023da8a9513
SHA256

2d2de4ec2f4138384d7c8e418fcc9d92f73fee6f80b06152b304ade7473b0db8
SHA512

7c8551cb772b4e6827e0330c2a911a07bc487c9d35f00a3cb4d242688098213878bbb7c1887ac2921172f10870578f3c58284964e9908849fb331a523a50cc26
SSDEEP

6144:ATNGQJOFWypMTG2sUA/uv1YkD1cfpvhk4CfiMO9crXz0AcwjoSv:cJOR6TG2sl/AhKxvhkHDH8cjoSv

Score

7^/10

upx

UPX packed file 2 IoCs

Detects executables packed with UPX/modified UPX open source packer.

resource	yara_rule
behavioral1/memory/2288-0-0x0000000010000000-0x00000000100A3000-memory.dmp	upx
behavioral1/memory/2288-1-0x0000000010000000-0x00000000100A3000-memory.dmp	upx

Suspicious use of WriteProcessMemory 7 IoCs

description	pid	Process	procid_target
PID 2252 wrote to memory of 2288	2252	rundll32.exe	28
PID 2252 wrote to memory of 2288	2252	rundll32.exe	28
PID 2252 wrote to memory of 2288	2252	rundll32.exe	28
PID 2252 wrote to memory of 2288	2252	rundll32.exe	28
PID 2252 wrote to memory of 2288	2252	rundll32.exe	28
PID 2252 wrote to memory of 2288	2252	rundll32.exe	28
PID 2252 wrote to memory of 2288	2252	rundll32.exe	28

C:\Windows\system32\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\25636e3b6aa7ba435d1f89bc33a47ca6.dll,#1
1⤵
- Suspicious use of WriteProcessMemory
PID:2252
- C:\Windows\SysWOW64\rundll32.exe
  rundll32.exe C:\Users\Admin\AppData\Local\Temp\25636e3b6aa7ba435d1f89bc33a47ca6.dll,#1
  2⤵
  PID:2288

memory/2288-0-0x0000000010000000-0x00000000100A3000-memory.dmp

Filesize
652KB

Download
memory/2288-1-0x0000000010000000-0x00000000100A3000-memory.dmp

Filesize
652KB

Download
memory/2288-2-0x0000000010000000-0x00000000100A3000-memory.dmp

Filesize
652KB

Download